"The problem arises when an entity relies on an ID document as if it was private." -- YESSS. And more generally, the problem arises when an entity relies on any piece of information as if it was private, because as soon as you share it, it no longer is!